Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
File:                     I02TlaK6I5y50njrWJty7VyWctE.mft (raw, json)
Hash identifier:          g1WJaxdaiqFZ9vqVruF3SlfNrRGIAZwXnRHpcv7nI3E=
Subject key identifier:   63:63:14:19:FC:B8:4E:5A:94:2D:4D:07:63:83:52:E1:32:E5:2C:86
Authority key identifier: 23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1
Certificate issuer:       /CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
Certificate serial:       01962F746E790A8BD38A8EDF9B2AE5FD9D3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft
Manifest number:          0F33
Signing time:             Sun 13 Apr 2025 14:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:21 +0000
Files and hashes:         1: 1rz_9CUxf9DVS-YE4VuUc49q_EU.roa (hash: UNeHGEwryJnNi0oicKcUP2+AX+MdC5294S5To8LCDxA=)
                          2: I02TlaK6I5y50njrWJty7VyWctE.crl (hash: 2IWXJYnaU6h1Yptidw6sbLyFs3FZUy4K5QrZeGE2G4I=)
                          3: JuGf7pzc4HCrM3We2--OeQqSX4U.roa (hash: H4A47OUP6tLe0HcSGtfbX99Pdjm0iQtczsTWsqdmMN8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:6e:79:0a:8b:d3:8a:8e:df:9b:2a:e5:fd:9d:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234d9395a2ba239cb9d278eb589b72ed5c9672d1
        Validity
            Not Before: Apr 13 14:01:21 2025 GMT
            Not After : Apr 14 14:01:21 2025 GMT
        Subject: CN=63631419fcb84e5a942d4d07638352e132e52c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:80:d8:39:03:40:1f:d4:d0:f3:ae:29:6a:62:
                    ac:b3:07:41:cb:9b:9d:87:a3:94:de:3d:71:ed:27:
                    dd:9e:97:54:5b:e0:fb:bc:55:d5:66:e7:35:4f:c5:
                    a5:d7:68:79:fb:01:51:14:a0:27:7b:54:96:88:9f:
                    f9:d8:b2:b7:87:d2:e3:e6:5d:9a:b0:1e:62:e8:b2:
                    b9:d8:41:43:14:52:7c:e5:7e:16:31:c8:2c:24:8b:
                    1b:4b:66:e6:0c:fe:1a:f3:6a:11:65:3c:77:c2:6d:
                    32:5d:a4:cb:a8:37:c3:ae:2b:ff:d2:ae:91:72:87:
                    2a:2c:9e:aa:80:07:06:70:5f:43:93:b2:c8:28:54:
                    bb:69:00:5b:7e:22:aa:be:26:1f:b5:76:b6:ae:11:
                    cd:f1:f2:07:69:9c:cd:2e:d8:aa:1d:3f:4c:98:7c:
                    c0:28:cf:d2:db:2e:87:a7:43:b7:93:cc:0a:6b:13:
                    1a:fb:98:12:96:1a:9f:a3:c4:69:58:af:55:5a:59:
                    ab:1f:6d:cc:42:2c:15:4f:43:c1:2c:ae:b9:3d:be:
                    2d:65:c1:66:d8:c7:a0:a7:60:d1:2e:50:82:db:56:
                    cc:47:bc:4a:5b:5e:03:b3:8b:eb:c7:d9:00:39:df:
                    1e:69:13:eb:33:46:57:c2:86:23:2d:ff:8d:e2:36:
                    95:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:63:14:19:FC:B8:4E:5A:94:2D:4D:07:63:83:52:E1:32:E5:2C:86
            X509v3 Authority Key Identifier:
                keyid:23:4D:93:95:A2:BA:23:9C:B9:D2:78:EB:58:9B:72:ED:5C:96:72:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I02TlaK6I5y50njrWJty7VyWctE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3de8cc-db79-4a9b-b79a-4ef488dc6dc4/1/I02TlaK6I5y50njrWJty7VyWctE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:6d:93:e3:6a:fa:65:c5:b6:11:2b:f4:d6:4c:a1:1f:9c:16:
         62:6a:e0:ea:8a:96:04:52:b9:a7:e3:97:6c:38:f0:f8:5d:db:
         d2:65:3c:61:d2:1b:66:e5:7f:1a:3c:e2:ab:7e:e6:da:1e:52:
         d6:0f:75:c5:24:0f:98:68:da:d9:cc:3e:b0:69:94:16:46:9f:
         ce:7b:76:63:23:70:90:de:e6:1a:87:0f:7e:0f:91:58:e1:4c:
         9f:97:68:c0:cf:c9:ad:fa:c7:3a:b3:6a:88:0d:fd:17:a8:09:
         80:ed:28:f7:db:a9:fa:57:19:b0:dc:00:c3:c1:e7:b8:25:c5:
         0a:28:a3:25:f9:98:d6:9f:aa:53:b0:ce:8d:b4:79:3f:64:21:
         55:e0:fc:61:4a:1f:9e:60:f4:21:25:95:06:6e:dc:1a:36:b8:
         84:e2:8c:42:0c:4b:07:49:2c:62:42:b8:d3:b1:57:74:15:1c:
         27:4a:10:2d:f3:ef:49:d6:18:04:d3:66:ca:0c:06:10:d1:31:
         84:01:e9:b6:22:40:b1:b4:4f:ab:2c:5b:49:a8:64:8a:49:72:
         1a:8f:26:4c:0d:3c:01:76:32:37:9b:fd:f4:97:ce:80:6d:d9:
         6d:e0:fd:63:ae:5f:76:cd:c3:ef:7d:b7:86:85:5e:6a:09:d8:
         0b:1d:ff:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdG55CovTio7fmyrl/Z0/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGQ5Mzk1YTJiYTIzOWNiOWQyNzhlYjU4OWI3MmVkNWM5
NjcyZDEwHhcNMjUwNDEzMTQwMTIxWhcNMjUwNDE0MTQwMTIxWjAzMTEwLwYDVQQD
Eyg2MzYzMTQxOWZjYjg0ZTVhOTQyZDRkMDc2MzgzNTJlMTMyZTUyYzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYDYOQNAH9TQ864pamKsswdBy5ud
h6OU3j1x7SfdnpdUW+D7vFXVZuc1T8Wl12h5+wFRFKAne1SWiJ/52LK3h9Lj5l2a
sB5i6LK52EFDFFJ85X4WMcgsJIsbS2bmDP4a82oRZTx3wm0yXaTLqDfDriv/0q6R
cocqLJ6qgAcGcF9Dk7LIKFS7aQBbfiKqviYftXa2rhHN8fIHaZzNLtiqHT9MmHzA
KM/S2y6Hp0O3k8wKaxMa+5gSlhqfo8RpWK9VWlmrH23MQiwVT0PBLK65Pb4tZcFm
2Megp2DRLlCC21bMR7xKW14Ds4vrx9kAOd8eaRPrM0ZXwoYjLf+N4jaVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNjFBn8uE5alC1NB2ODUuEy5SyGMB8GA1UdIwQY
MBaAFCNNk5WiuiOcudJ461ibcu1clnLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEt
NGVmNDg4ZGM2ZGM0LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zZGU4Y2MtZGI3OS00YTliLWI3OWEtNGVmNDg4ZGM2ZGM0
LzEvSTAyVGxhSzZJNXk1MG5qcldKdHk3VnlXY3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH22T42r6
ZcW2ESv01kyhH5wWYmrg6oqWBFK5p+OXbDjw+F3b0mU8YdIbZuV/Gjziq37m2h5S
1g91xSQPmGja2cw+sGmUFkafznt2YyNwkN7mGocPfg+RWOFMn5dowM/JrfrHOrNq
iA39F6gJgO0o99up+lcZsNwAw8HnuCXFCiijJfmY1p+qU7DOjbR5P2QhVeD8YUof
nmD0ISWVBm7cGja4hOKMQgxLB0ksYkK407FXdBUcJ0oQLfPvSdYYBNNmygwGENEx
hAHptiJAsbRPqyxbSahkiklyGo8mTA08AXYyN5v99JfOgG3ZbeD9Y65fds3D7323
hoVeagnYCx3/LA==
-----END CERTIFICATE-----